High severity · published Sep 3, 2025
CVE-2025-20336
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Disclosure Vulnerability
7.5
CVSS
0.4%
EPSS
No
On KEV
Description
A vulnerability in the directory permissions of Cisco Desk Phone 9800 Series, Cisco IP Phone 7800 and 8800 Series, and Cisco Video Phone 8875 could allow an unauthenticated, remote attacker to access sensitive information on an affected device.
This vulnerability exists because the product exposes sensitive information to an actor that is not explicitly authorized to have access to that information. An attacker could exploit this vulnerability by sending a crafted packet to the IP address of a device that has Web Access enabled. A successful exploit could allow the attacker to access sensitive information from the device.
Note: To exploit this vulnerability, Web Access must be enabled on the phone. Web Access is disabled by default.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
None
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.4% · higher than 33% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CS
Cisco Session Initiation Protocol (SIP) Software · Cisco
12.1(1)SR1; 11.5(1); 10.3(2); 10.2(2); 10.3(1); 10.3(1)SR4; +34 more · source: vendor
DP
Desk Phone 9841 Firmware · Cisco
3.0\(1\) before 3.3\(1\) · source: NVD
DP
Desk Phone 9851 Firmware · Cisco
3.0\(1\) before 3.3\(1\) · source: NVD
DP
Desk Phone 9861 Firmware · Cisco
3.0\(1\) before 3.3\(1\) · source: NVD
DP
Desk Phone 9871 Firmware · Cisco
3.0\(1\) before 3.3\(1\) · source: NVD
IP
IP Phone 7811 Firmware · Cisco
before 14.3\(1\); 14.3(1); 14.3(1) · source: NVD
IP
IP Phone 7821 Firmware · Cisco
before 14.3\(1\); 14.3(1); 14.3(1) · source: NVD
IP
IP Phone 7841 Firmware · Cisco
before 14.3\(1\); 14.3(1); 14.3(1) · source: NVD
IP
IP Phone 7861 Firmware · Cisco
before 14.3\(1\); 14.3(1); 14.3(1) · source: NVD
IP
IP Phone 8811 Firmware · Cisco
before 14.3\(1\); 14.3(1); 14.3(1) · source: NVD
IP
IP Phone 8821 Firmware · Cisco
before 11.0\(6\); 11.0(6); 11.0(6); 11.0(6); 11.0(6); 11.0(6); +1 more · source: NVD
IP
IP Phone 8841 Firmware · Cisco
before 14.3\(1\); 14.3(1); 14.3(1) · source: NVD
Affected product
CS
Cisco Session Initiation Protocol (SIP) Software
Cisco
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-20336
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-20336
Vendor Advisory
https://sec.cloudapps.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-phone-write-g3kcC5Df
More from Cisco Session Initiation Protocol (SIP) Software
7.5
CVE-2026-20281
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Software Denial of Service Vulnerability
7.5
CVE-2025-20350
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Denial of Service Vulnerability
6.5
CVE-2021-1379
Cisco IP Phones Cisco Discovery Protocol and Link Layer Discovery Protocol Remote Code Execution and Denial of Service Vulnerabilities
6.1
CVE-2025-20351
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Cross-Site Scripting Vulnerability
5.3
CVE-2025-20335
Cisco Desk Phone 9800 Series, IP Phone 7800 and 8800 Series, and Video Phone 8875 with SIP Firmware Information Arbitrary File Write Vulnerability